Aclara SGM1400 Series, User Manual

Page: 89 / 108

S G M 1 4 0 0 S e r i e s S m a r t M e t e r U s e r M a n u a l – S M E T S 2
79
Chapter 7 • Installation
It is advised that the user (utility) includes in their customer guidance
literature and training the following:
If the meter is situated such that other people can easily read the meter,
then the user should change the privacy PIN from the default of "0000" to
their own 4-digit code.
When entering the code, the customer should always take care to shield their
entry from the view of others.
The chosen 4-digit code should not be easily guessable, so it should not be
part of the meter serial number or be the same digit repeated.
We would like to remind the user (utility) that although the meters are
delivered with security credentials already installed, it is the user’s obligation
to ensure these are changed according to the DCC terms (within the time set
in the requirements) using the Update Device Certificates on Device
Command. The utility must issue an Issue Security Credentials command to
ensure the meter generates new key pairs.
W
ARNING
The meter will perform checks to ensure: 1) Repeat UTRNs are not accepted.
2) Multiple retries are not attempted - the meter will block entry for a period
of 1 hour to prevent this. 3) Wrongly formatted UTRNs are not accepted.
However, it is the user (utility) that must reconcile the issued UTRNs with the
used UTRNs and is responsible for the security on UTRN issuing, etc.
Tamper Seals
The meter has two tamper evident seals, one located on the meter terminal cover
and one on the CSP communications module. Installers and maintenance
engineers should inspect the seals for integrity and report any sign of tampering.
Additionally, there is an MID certification seal. Any evidence of this being broken
or tampered with should be reported.
Confidential Data Security
It is the responsibility of the utility to protect the confidential data for its end
customers. Aclara recommends the following:
1.
Before removing a meter, the utility should always perform a change of
tenancy (CoT), which will restrict the confidential data.
•
For meters returned to the factory, Aclara can remove all of the
confidential data (e.g., if it was impossible to perform a CoT before the
meter was removed from the premise).
2.
The utility should always issue a CoT after the departure of a tenant to
ensure that access to personal data for a previous tenant is restricted.
3.
The utility should ensure that all sensitive data is removed prior to meter
installation.
4.
The utility should ensure that procedures are in place for the secure
disposal of meters that are not to be re-installed or are deemed end of life.
•
For end of life meters that are returned to the factory, Aclara can
remove all data.